{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:a8138715-2749-542d-ab61-478319881fe1", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-jcl", "purl": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.2", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.2", "version": "5.2.7.RELEASE-tuxcare.2", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:93c476a6-72e8-58c1-87cb-78452d0071b7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:00fc7b14-9121-577f-b9bc-3c7d0aa0db5b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:8eaba9d9-b005-53f7-b6e5-d4f3546bdac7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:1003e5f3-a57c-5540-958b-af8502309af3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:a71bc20a-5302-5d92-8c88-9c9ea2ce04f3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:e485a0f0-2e55-5953-86ec-883089581f31", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22950 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:bf8d7115-8cf3-50ec-ba18-155f40beb9c7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:7ded02c9-324b-56b0-bb79-7252701c687d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22968 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:9d16453b-8010-54c6-afb5-f69c5e56dbb3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:f3b5c404-4baa-53d3-8549-8bc9b249fb03", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:66181f95-af6d-52eb-b052-334746c66c4e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:c43a083c-b0c0-5fc7-a387-279b325cb6de", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:3af5c719-dc8d-5fcb-8cbe-ccf052d06560", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:9e955454-783f-5f6b-b4f2-7c9f6822bac1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:83648cda-e96a-50be-b10b-009ffa795225", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:63915da6-8651-54e4-9871-d60aeda9318f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:41b60779-9cc8-5824-8040-74f84b35dda3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38809 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:83b4f6b8-869b-528b-8e28-15d690f95c6d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:3d1d1d8b-ec21-5d99-9b55-c79765b5f068", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:1ea6e605-33c8-5946-823a-7587ee83c1ed", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-jcl. not_affected \u2014 Spring Framework 5.2.7.RELEASE is not affected by CVE-2024-38820. This CVE addresses a locale-dependent toLowerCase() issue introduced by the CVE-2022-22968 fix. The target version predates the CVE-2022-22968 fix and does not contain the vulnerable code pattern (toLowerCase() without Locale.ROOT in disallowedFields matching). The target uses case-sensitive field matching without any toLowerCase...", "justification": "code_not_present" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:83d35e9a-7556-5ffe-b20d-8438cdaa26b2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:caf7698d-6802-568d-b278-f827c5b46c88", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:140f8f96-3aee-5d12-9c7e-71b854abfeed", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:026707bf-12ab-5ffb-b2aa-554a5012feef", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:7f15ce90-9192-513e-8ff1-c2f2f0e165b2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:4754f1bc-3cd0-5aae-b163-6ac833580c22", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:863ccb02-13ca-5ad1-99b1-81ea9e099888", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:ff58ef27-ed3d-5754-8998-8635a0788a72", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:8ca04c52-cae9-54e8-9b3b-0b0904a109c2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:9bf28f46-4d90-5041-9c0d-382afd2c7f37", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41838 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:059423b4-038b-5450-aa7c-085c5d76a319", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:0a32155c-7453-5d81-aa3b-f1752f0fba8e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:7523cbea-861b-552b-82f9-e6e8c3554014", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:5fd4eded-354c-5d80-aff5-9e221980782d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:543191c5-2d33-5056-b427-d26cbb1e0e59", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:b911c5a0-38c0-52e0-999c-510e1a67496c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:0434e939-5ad0-59dc-9999-1cf17c08c7a2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:852ab407-b395-5a22-a204-23c891c3769c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:8baded37-ca39-5cd2-b39f-7775673f3861", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:e9cd2920-4009-5a89-9d7f-560b27372c98", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:222b2be4-6079-5f16-b125-bd99846686d3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:f8cdd67a-162d-5e66-972c-b155e3af4f0d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:ea8cd7d6-0e29-5b73-8540-86f8a3454c7d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:abaf6656-8919-5dc4-8d8d-43a5d80c47c4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:74a08e82-278f-5ff2-b812-30b2077e616c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:989065dd-5bda-5bbd-885c-14f0b30e5ca0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:f8bb8cfa-a589-56f5-955e-5868afdb82e6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:1157a652-ddf4-584d-b4d0-0572265e26e6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:6299cdc2-8dea-5f22-ae88-42108b20e80f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:c25aad1d-fbad-5316-aa01-9d25065bd37c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:985af298-f8ad-5285-bac6-6cff27af3a15", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:f7c7bc13-a0af-57b6-9f8c-9037c223adc5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:45f965e2-cc1a-5828-858f-be3b2eefbad9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:cb7ad4c5-b52a-5ae5-b364-380083879f35", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:623ad534-040a-515b-9920-084644f9ae85", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:fb6f3c78-bd53-507c-b2c5-658b3c872300", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:2ba29b83-9957-5f0d-a419-c5b0457c40a6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:d7923f22-c063-5238-b8a9-116733783cd2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:222ac5a9-b38d-5b9e-8113-078473fc6c29", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-jcl." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.2" } ] }